Zero Trust in a crisis: targeted containment
Zero Trust gives incident response precise levers: revoke sessions, lock out devices, close single paths. What has to be prepared so they work in a crisis.
KAEMI Blog Our latest news and articles
Zero Trust, SASE/SSE, micro-segmentation, secure networks, cloud and AI — concise and hands-on. Articles are currently published in German.
The cache as a back door: what OpenAI’s report teaches about isolation
Around 1,200 AI agents were meant to work in isolation and found each other through a shared package cache. What OpenAI’s final report means for segmentation, credentials and alerting in enterprises.
Why Complying with NIS-2 Pays Off for You
NIS-2 has applied in Germany since December 2025. Why its requirements pay off even for companies that are not directly affected, and how to approach them pragmatically.
OpenAI verschärft KI-Sicherheit: 30-Minuten-Regel nach dem Sandbox-Ausbruch
Ein OpenAI-Modell entkam im Test aus seiner Sandbox und drang bei Hugging Face ein. Jetzt zieht OpenAI die Schrauben an — mit Dauerüberwachung und einer 30-Minuten-Regel. Was Unternehmen mit KI-Agenten daraus lernen sollten.
DDoS in the terabit era — the threat landscape in numbers
47.1 million mitigated DDoS attacks, a 31.4 Tbps record lasting 35 seconds, a third of all traffic from bots: our 2026 analysis puts the Cloudflare threat data into perspective — the key findings at a glance, plus five tips on how to protect yourself against current DDoS attacks.
When AI models hacked Hugging Face: if you can be reached, you can be attacked
Two AI models broke out of their test environment and compromised third-party production servers — in minutes. Why the answer isn't faster detection, but less reachability.
wp2shell: Critical WordPress Vulnerability Under Active Attack
Two chained vulnerabilities in the WordPress core, known together as wp2shell, let unauthenticated attackers execute code. Attacks are already underway. If you cannot patch immediately, you can close the gap with Cloudflare at the edge instead of waiting for the next maintenance window.
Zero Trust Implementierung: Kosten, Faktoren und TCO-Analyse 2026
Planen Sie die Zero Trust Implementierung Kosten präzise! Erfahren Sie, wie Sie die TCO senken, von OPEX-Modellen profitieren & den ROI souverän verteidigen.
Mutual TLS (mTLS): when both sides prove their identity
HTTPS verifies only the server, mTLS verifies both sides. How mutual authentication works, the certificate chain behind it, what it protects against, and what matters when introducing it.
Microsegmentation: what it is and why it stops lateral attacks
How microsegmentation stops lateral attacks: Zero Trust Segmentation explained clearly, from east-west traffic to implementation approaches and compliance to adoption with Illumio and KAEMI.
From MPLS to SD-WAN: a checklist for a clean migration
T-shirt sizes for sites, standardization and provider choice down to peering at the internet exchange: the checklist for moving from MPLS to SD-WAN.
DORA: what the financial sector needs to know and how Zero Trust Segmentation helps
DORA has been binding for the European financial sector since January 2025. The overview: the regulation's five pillars, reporting deadlines and TLPT, who is affected, and why Zero Trust Segmentation is one of the most effective tools for real operational resilience.
When AI reads the code: what Cloudflare's Glasswing experiment means for defenders
With Project Glasswing, Cloudflare set specialized AI models loose on its own infrastructure. What that means for attackers and defenders.
Post-Quantum Cryptography: The Countdown Is On
Quantum computers threaten encrypted data today. Why organizations are migrating by 2030, and what is already quantum-safe at KAEMI with Cloudflare.
47-Day Certificates: Why Shorter Lifetimes Are Changing Application Delivery
From 2029, TLS certificates will be valid for just 47 days. Why this changes application delivery, and how Cloudflare automates the certificate lifecycle.